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Claims 



1. Method with which a mobile subscriber with a^AP-enabled 
terminal can access a WEB or WAP server, 

wherein said terminal sends a request for said serve/to a WAP gateway, 
5 wherein the security in the air interface between said WAP-enabled 
terminal and said gateway is based on WTLS (Wirel^ess Transport Layer 
Security), 

wherein the security protocol used by said s^^er is based on the SSL 
and/or TLS security protocol, 
10 wherein the conversion between WTLS a/id SSL and/or TLS is effected in 
a secured domain of said server administrated by an administrator, 

and wherein the packets sent by said/terminal are routed by said 
gateway to said secured domain, with^HJt decrypting all the packets 
transported during a session. 

15 2. Method according to/claim 1, wherein said gateway (3) routs 

said packets to a proxy in said secured domain, said proxy using at least one 
protocol layer of the WAP protocol. 

3. Method accordirig to claim 2, wherein said packets are routed 
according to the URI and/9T the domain name of the requested page in said 

20 gateway. 

4. Method according to claim 2, wherein said packets are routed 
according to the port number in said gateway (3). 

5. Method according to claim 4, wherein the said packets are 
routed according to different port numbers to different secured domains. 
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6. Method according to claim 4, wherein said port numbers are 
extracted in in application layer of said gateway from the URI and/or URL 
of the requested page. 
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7. Method according to claim 6, wherein said port/number is 
extracted from only a restricted number of packets during/a session, 

and wherein the routing of at least one of the follovN^g packets 
depends on this extracted port number. 

8. Method according to claim 7, wherein ^ proxy server in said 
secured domain extracts the URI and/or the port niimber of the received 
packets and wherein the proxy server sends back/a command to said 
gateway if it receives a packet with a different JURI and/or port number. 

9- Method according to claim 4, wKerein said port number is 
extracted from said URI and/or URL of the ijequired web page in said 
terminal. 

10. Method according to clairyf 9, wherein said port number is 
extracted by a browser from said URI/and/or URL of the required web page. 

11. Method according to daim 8, wherein the browser in said 
terminal only copies said port nujriber in said packets if an end-to-end 
secured connection is requestec 

12. Method according to claim 3, wherein said packets in said 
gateway are routed to a se9ured domain if said port number is comprised 
in a predefined range. 

13. Method ac</ording to claim 3, wherein said gateway (3) sends a 
redirect command to S/aid terminal if an end-to-end secured connection is 
requested. 



14. Methoa according to the preceding claim, wherein said 
redirect commana is time-limited. 



15. Merthod according to claim 13, wherein a proxy server in said 
secured doma/n extracts the URI and/or the port number of the received 
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packets and sends a redirect command back to said terminal as ^on as the 
session is to be routed to said gateway. 

16. Method according to claim 13, wherein said r^irect command 
contains a forwarding address which is extracted from a^document made 
accessible by said WEB or WAP server. 
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17. Method according to claim 13, whereiiTf said redirect command 
contains a document which includes the forwarding address. 

18. Method with which a mobile use/with a WAP-enabled 
terminal can access a WEB or WAP server, 

said terminal sending a request for said setK^er to a WAP gateway, 
wherein a browser in said terminal extracts the port number of the 

demanded WEB or WAP page and copiefs it to packets sent to said gateway, 
and wherein said packets are rout^ in said gateway according to this 

port number. 



15 19. Gateway able to receive WTLS-secured datagrams from WAP- 

enabled terminals and to convert them into SSL-secured requests, 

wherein said gateway can /ecognize datagrams that are to be sent on 
transparently and routes these datagrams without decrypting them. 



20. Gateway according to the preceding claim, wherein said 

20 packets are routed acc9rding to the URI and/or the domain name of the 
requested page. 

21. Gateway according to the claim 19, wherein said packets are 
routed according/to the port number of the requested page. 



22. Gateway according to the preceding claim, wherein said 
25 packets are /outed to different secured domains according to different port 
numbers. 
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23. Gateway according to claim 21, wherein said gcTrt number is 
extracted from the URI and/or URL of the requested page in an application 
layer of said gateway. / 

24. Gateway according to claim 21, xA^l^erein said port number is 
extracted during a session only from a restrhz^ed number of packets, 

and wherein the routing of at least one following packet depends on 
said extracted port number, / 

25. Method with which^terminal can access a server, 
wherein said terminal sends a request for said server to a gateway, 
wherein the security betyveen said terminal and said gateway is based 

on a first security protocol; 

wherein said servenrs secured with a second security protocol, 
wherein the convi^sion between said first and said second security 

protocol is effectep in a secured domain of said server administrated by an 

administrator, / 

and wherem the packets sent by said terminal are routed by said 

gateway to/sa id secured domain, without decrypting all the packets 

transmitt^ during a session. 



